ropshell> use 7450dd3ddf93a83f69c64c82b539212a (download)
name         : win32kfull.sys (x86_64/PE)
base address : 0x1c0001000
total gadgets: 13056

ropshell> suggest "sp lifting"
> 0x1c00be195 : add rsp, 0x18; ret
> 0x1c00be195 : add rsp, 0x18; ret
> 0x1c000c6fe : add rsp, 0x28; ret
> 0x1c000aeab : add rsp, 0x38; ret
> 0x1c0003bca : add rsp, 0x48; ret
> 0x1c00101a1 : add rsp, 0x58; ret